Well, you made no mention of editing the rule, so it leaves me guessing at what has and has not been done.
After i mentioned that the rule was not configured correctly, you came back and said only that it still wasn't working.
I cant know if you are doing something wrong or not if i dont what you are doing.
If i cant see the code, I cant tell what the problem may be, or how it was created. this is why I keep asking for copies of the page and screen shots showing how the rule is configured. I dont have a view to your screen, and this is the information that I need to know what may be wrong.
Lets check to see what sessions are getting set. add this code just after the <body> tag in the login page:
php:
<?php
if(!session_id()) @session_start();
var_dump($_SESSION);
?>
